Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/p5XIVBRfY8jBtfX_FwYCLgCVVQc.roa
File: p5XIVBRfY8jBtfX_FwYCLgCVVQc.roa (raw, json)
Hash identifier: sD58oOreJlSBKENUdPk3Qd9el0kYqqT2VoIcHqGM7BI=
Subject key identifier: A7:95:C8:54:14:5F:63:C8:C1:B5:F5:FF:17:06:02:2E:00:95:55:07
Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Certificate serial: 01823571BF618864199913DD7AF39AEE0916
Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/p5XIVBRfY8jBtfX_FwYCLgCVVQc.roa
Signing time: Mon 25 Jul 2022 13:00:23 +0000
ROA not before: Mon 25 Jul 2022 13:00:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210644
IP address blocks: 77.73.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:35:71:bf:61:88:64:19:99:13:dd:7a:f3:9a:ee:09:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Validity
Not Before: Jul 25 13:00:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a795c854145f63c8c1b5f5ff1706022e00955507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:bf:8c:b9:f7:20:9d:12:31:b5:bd:04:6c:e4:
3f:17:f2:22:93:fd:80:fc:6c:45:8b:97:2c:f9:2d:
5f:de:fe:3f:93:39:93:bf:36:69:f8:59:cb:01:65:
2d:be:95:f7:f4:6d:57:c3:7d:87:74:72:b7:83:8f:
8f:2c:ec:3f:c4:3a:ac:7c:3d:83:37:9c:b8:3e:82:
de:f6:c2:7b:09:5f:53:73:2d:39:ff:29:aa:3d:94:
2c:e1:7a:36:2f:44:c2:f7:dd:94:fe:2b:25:86:14:
e0:4f:dc:49:20:74:20:d0:4f:b4:53:7e:e3:2d:36:
5d:de:7b:73:39:15:9f:b4:30:ee:24:a4:af:0b:5a:
56:dd:8e:5d:eb:bb:c7:67:c3:0a:90:72:11:47:29:
c4:27:17:fd:3f:4c:55:5d:0a:c7:39:12:f0:41:fe:
e7:13:4f:30:16:bd:6e:88:94:ca:ac:8f:21:bb:95:
07:e2:9a:e5:3c:f9:1f:8e:e0:4e:40:b7:ce:84:c4:
47:ff:a2:38:8e:21:83:8f:0e:dd:7b:20:1e:3b:d7:
23:a3:83:91:09:04:3e:57:eb:d2:c7:c5:b7:a6:fd:
87:4c:ee:0a:a7:45:f9:0b:48:d3:35:27:2a:4d:a0:
29:cd:8f:04:9d:c4:17:32:fc:8b:9a:e2:a2:c0:6d:
11:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:95:C8:54:14:5F:63:C8:C1:B5:F5:FF:17:06:02:2E:00:95:55:07
X509v3 Authority Key Identifier:
keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/p5XIVBRfY8jBtfX_FwYCLgCVVQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.132.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:ba:a8:37:d7:95:3c:2e:d4:a3:60:6e:cc:cb:61:62:24:02:
e1:57:d1:eb:84:a8:58:ba:36:85:7f:90:a6:58:b7:34:e4:cc:
2c:63:07:76:09:09:89:89:b4:a6:7a:75:d3:0a:f8:f9:9f:98:
ca:a5:99:ac:dd:d1:d7:ea:57:92:48:8a:d3:fd:53:40:dd:f5:
bb:53:08:3c:1f:24:53:61:1f:e0:38:62:a0:11:d0:be:e5:af:
5f:41:62:82:2c:46:08:84:36:d5:f3:f4:b5:f7:30:b5:ba:f3:
da:6d:45:20:28:f8:c0:13:37:b1:9e:89:b0:9c:b2:52:dd:46:
0a:65:f6:89:09:d5:10:3f:e3:d3:f0:40:61:40:8c:76:a5:e7:
31:57:da:09:5f:a3:e9:45:07:ad:3d:cc:9f:66:33:1d:07:36:
ca:21:c3:13:c7:66:de:54:53:22:f9:61:5e:7f:e3:45:d2:76:
4b:33:57:5b:4c:95:9e:58:5b:64:7b:fc:63:3e:84:fb:ba:1e:
47:29:11:d0:72:1a:5b:9e:b2:48:b5:8f:8f:da:54:3b:47:b6:
49:75:ee:28:91:33:70:b4:c2:49:b4:5c:b4:1f:35:44:53:11:
d2:e8:16:ce:c8:3e:0c:67:16:c5:be:af:15:e1:30:5b:62:b9:
f7:4d:df:3c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYI1cb9hiGQZmRPdevOa7gkWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZmExM2YxYWUwNTM5MTYyODBlYzY4ZWUxYjA5NzZmOWVi
ZDNlYTgwHhcNMjIwNzI1MTMwMDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzk1Yzg1NDE0NWY2M2M4YzFiNWY1ZmYxNzA2MDIyZTAwOTU1NTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkb+MufcgnRIxtb0EbOQ/F/Iik/2A
/GxFi5cs+S1f3v4/kzmTvzZp+FnLAWUtvpX39G1Xw32HdHK3g4+PLOw/xDqsfD2D
N5y4PoLe9sJ7CV9Tcy05/ymqPZQs4Xo2L0TC992U/islhhTgT9xJIHQg0E+0U37j
LTZd3ntzORWftDDuJKSvC1pW3Y5d67vHZ8MKkHIRRynEJxf9P0xVXQrHORLwQf7n
E08wFr1uiJTKrI8hu5UH4prlPPkfjuBOQLfOhMRH/6I4jiGDjw7deyAeO9cjo4OR
CQQ+V+vSx8W3pv2HTO4Kp0X5C0jTNScqTaApzY8EncQXMvyLmuKiwG0RcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKeVyFQUX2PIwbX1/xcGAi4AlVUHMB8GA1UdIwQY
MBaAFK/6E/GuBTkWKA7GjuGwl2+evT6oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcl9vVDhhNEZPUllvRHNhTzRiQ1hiNTY5UHFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9hM2MwYTQtMzE5MS00ZTUxLThkODAt
NDc4YzJjOGNiMmEwLzEvcDVYSVZCUmZZOGpCdGZYX0Z3WUNMZ0NWVlFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9hM2MwYTQtMzE5MS00ZTUxLThkODAtNDc4YzJjOGNiMmEw
LzEvcl9vVDhhNEZPUllvRHNhTzRiQ1hiNTY5UHFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATUmEMA0G
CSqGSIb3DQEBCwUAA4IBAQDHuqg315U8LtSjYG7My2FiJALhV9HrhKhYujaFf5Cm
WLc05MwsYwd2CQmJibSmenXTCvj5n5jKpZms3dHX6leSSIrT/VNA3fW7Uwg8HyRT
YR/gOGKgEdC+5a9fQWKCLEYIhDbV8/S19zC1uvPabUUgKPjAEzexnomwnLJS3UYK
ZfaJCdUQP+PT8EBhQIx2pecxV9oJX6PpRQetPcyfZjMdBzbKIcMTx2beVFMi+WFe
f+NF0nZLM1dbTJWeWFtke/xjPoT7uh5HKRHQchpbnrJItY+P2lQ7R7ZJde4okTNw
tMJJtFy0HzVEUxHS6BbOyD4MZxbFvq8V4TBbYrn3Td88
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:55 2025 by rpki-client